General

  • Target

    9c4e92809ffd7ee566bd611107300d60N.exe

  • Size

    229KB

  • MD5

    9c4e92809ffd7ee566bd611107300d60

  • SHA1

    8791a67b7bcf9e789c9f7fc250cfd565e853301c

  • SHA256

    88fcadc1210e7789f013cd383b241248f5024808ec9b7be746e4fff3d9279035

  • SHA512

    718aee3ab5d5b7b6f3c94f8c0b72037e6c972888475789b020c14b69b97324977341494e035b88029cbce30a7f4365e5f785a05b4b73dda088671ec42cef6bb4

  • SSDEEP

    6144:9loZM+rIkd8g+EtXHkv/iD4iOKft74szxKrd4UB1sb8e1mdi:foZtL+EP8iOKft74szxKrd4UBSD

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1262605665793216545/jI0VCKzbwqUqmD0Nvph6XtMoXzDPJkdLYyiOHA0Dx17W8D9RlBHJKYCNQG3SZ2hHmIy0

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9c4e92809ffd7ee566bd611107300d60N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections